MovieReaper Initial Loader/Implant Known-Hash Execution

Ibrahim Saud@tektrix

•updated 21 days ago•0•0•3

This rule identifies the execution or presence of files matching a known list of MD5 hashes associated with malicious activity. By monitoring file metadata, this rule flags instances where specific identified threat files are present on the system.